|
A significant number of businesses are not prepared for CCPA and are caught between weighing the cost and effort of complying with the act and the probability of enforcement actions being brought against them. Companies with annual gross revenues of $25 million or more, those that buy or sell more than 50,000 individuals’ data, and those that make more than half of their annual revenues from selling customer data need to comply. |
相当多的企业没有准备好采用《反腐败和保护法》，而且在权衡遵守该法的费用和努力以及对它们采取执法行动的可能性之间陷入困境。年总收入为 2,500 万美元或以上的公司、购买或出售超过 50,000 个个人数据的公司以及销售客户数据的年收入超过一半的公司都需要遵守规定。 |
|
For businesses that fail to or refuse to comply, fines can be steep. The CCPA states that companies can be penalized $2,500 for each record of unintentional violation and $7,500 for each record of intentional violation. Ignoring the rules or taking no action to comply may result in intentional violations. This cost is levied per record or instance, meaning fines can rise to the hundreds of thousands of dollars. |
对于不遵守或拒绝遵守的企业，罚款可能很高。《反腐败和保护法》规定，公司每次无意违规记录可处以 2 500 美元的惩罚，每次蓄意违规记录可处以 7 500 美元的惩罚。无视规则或不采取任何行动遵守可能会导致蓄意违反规定。此成本是按记录或实例征收的，这意味着罚款可能会上升到数十万美元。 |
|
Complacency is not a strategy. This is just one of many regulations designed to protect consumers’ right to privacy. Organizations should have a comprehensive program, utilizing the right technology partners, to automate their consumer privacy practice and adhere to the regulations. Just as we have seen with GDPR, the companies that fail to make the investment now are only going to have to put in more work and effort down the line. |
自满不是一种战略。这只是许多旨在保护消费者隐私权的法规之一。企业应该有一个全面的计划，利用合适的技术合作伙伴，自动执行消费者隐私实践并遵守法规。正如我们在 GDPR 中看到的那样，现在没有投资的公司只需要投入更多的工作和努力。 |
|
Organizations need to implement advanced data classification, data anonymization, data masking, security, and access controls in order to set themselves up for successful compliance. ESG believes that many organizations are only ready on the surface—with marketing opt-in/out processes, for example. |
企业需要实施先进的数据分类、数据匿名化、数据掩码、安全性和访问控制，以便为成功的法规遵从性做好准备。ESG 认为，许多组织只是在表面上做好准备，例如采用市场营销选择/退出流程。 |
|
Successful organizations must be able, in time, to offer online portals that provide verified users the ability to know all of the data the organizations hold about them, and comply with the various requirements that are applicable. |
成功的组织必须能够及时提供在线门户网站，使经验证的用户能够了解组织持有的关于他们的所有数据，并遵守适用的各种要求。 |